The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS…

Yelp: arbitrary file read

A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a…

While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a…

Gimp: gimp: heap buffer overflow in read_channel_data()

Xorg: xwayland: use-after-free in xkb client resource removal

Xorg: xmayland: value overflow in xkbsetcompatmap()

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property…

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication

A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Kernel: out-of-bounds read vulnerability in smbcalcsize

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition)

When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be…

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)

The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the…

Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or…

arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory…

An integer underflow issue exists in ntfs-3g 2017.3.23

A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is…

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain…

A flaw was found in the way Samba handled file/directory metadata

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)

An issue was discovered in OpenSSH 7.9

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access

Ipa: invalid csrf protection

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

Samba: smb clients can truncate files with read-only permissions

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

Keylime: challenge-response protocol bypass during agent registration

A use-after-free flaw was found in libvirt

There's a flaw in urllib's AbstractBasicAuthHandler class

An information disclosure vulnerability was found in libvirt in versions before 6.3.0

It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite

Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write